Network Integration Guide › Configuring the NBA › NBA Filters

NBA Filters

The NBA uses filters to check every IP packet it sees. These packets are then analyzed, decrypted, monitored, prohibited or ignored, depending on how the filters are configured. The NBA supports network filters and application filters. Both are defined in nbapolicy.xml.

• Network filters can optionally check for TCP or UDP data packets, the IP addresses and the port numbers they use.
• Application filters can check a packet’s IP addresses and port numbers. They can also identify the protocol (which indicates the message type). For example, they can identify email or IM packets, or file uploads.

An NBA policy typically contains multiple application and network filters. To simplify filter management, you can organize your filters into groups. You can also assign descriptive filter names to help administrators understand the purpose of each filter.

You can assign multiple IPv4, or IPv6 addresses, or both, to network and application filters. You add and edit filters in the Filters screen of the NBA console. You can also directly edit the NBA policy file, nbapolicy.xml.

More information:

Filtering Methods

Default Filters

Add or Delete Filters

Specifying IPv6 Adresses

Appending Port Numbers to IP Addresses

Filter Names

Filter Groups

Multiple Filters Are Applied Successively

Which Filter Takes Precedence?

Application Protocols